Ollama AI Security Flaw Exposed
1. Researchers found a security flaw in the Ollama AI platform (CVE-2024-37032) that allows remote code execution.
2. The flaw, named Probllama, is due to insufficient input validation, leading to a path traversal issue.
3. The risk is higher in Docker deployments because the API server runs with root privileges and is publicly exposed.
4. The issue was responsibly disclosed on May 5, 2024, and patched in version 0.1.34 on May 7, 2024.
5. Protect AI highlighted over 60 vulnerabilities in AI/ML tools, including a severe SQL injection flaw (CVE-2024-22476) in Intel Neural Compressor software.
#cybersecurity
#aiinfrastructure
#ollamaflaw
#cve202437032
#remotecodeexecution
#probllama
#cloudsecurity
#wizsecurity
#pathtraversal
#inputvalidation
#dockersecurity
#rootprivileges
#aiplatform
#responsibledisclosure
#patchupdate
#linuxsecurity
#windowssecurity
#macossecurity
#apiexposure
#serversecurity
#aithreats
#vulnerabilitydisclosure
#protectai
#sqlinjection
#intelneuralcompressor
#cve202422476
#aiexploits
#dataprotection
#techsecurity
#systemtakeover